CVE-2025-68623

The Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0 is vulnerable to a local privilege escalation flaw during its installation process. The installer runs with HIGH integrity and downloads components to the %TEMP% folder, which is writable by standard users. An attacker can replace t...